caef6f271771ae3d1abe4fd9a9eda001[.]exe

General

Target
caef6f271771ae3d1abe4fd9a9eda001.exe
Size 292KB
Sample231126-2l4f2sch49
SHA256 78a2bba2b5340b176b67cb9c6d9fd1c984a4bb4d0ee6a041256b4dc733acefb2
MD5 caef6f271771ae3d1abe4fd9a9eda001
SHA1 7e65dfe3cc95f88d7deb7ab2ace1cb911ab33cb0
SHA512 de22d01bc030b0a6107786e8e33983726dc0e5a74e622bdf3a83fae403078322d570aeb88324245df81734d06450f57e981011f671b785808ab5dc85fc5451e1
SSDEEP 3072:ptDqZkZ2CfJ4Yp0Bb7RULMMCvgdBqCttMxrOUbR:3DJACR4DRRUwMCCBDttMvR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caef6f271771ae3d1abe4fd9a9eda001.exe

File Explorer

caef6f271771ae3d1abe4fd9a9eda001.exe

.exe 292KB

caef6f271771ae3d1abe4fd9a9eda001.exe

IMPHASH a8c9b214465db11dd2d44bc442cb8e42
SHA256 78a2bba2b5340b176b67cb9c6d9fd1c984a4bb4d0ee6a041256b4dc733acefb2
MD5 caef6f271771ae3d1abe4fd9a9eda001
SHA1 7e65dfe3cc95f88d7deb7ab2ace1cb911ab33cb0
SHA512 de22d01bc030b0a6107786e8e33983726dc0e5a74e622bdf3a83fae403078322d570aeb88324245df81734d06450f57e981011f671b785808ab5dc85fc5451e1
SSDEEP 3072:ptDqZkZ2CfJ4Yp0Bb7RULMMCvgdBqCttMxrOUbR:3DJACR4DRRUwMCCBDttMvR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17959

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TlsGetValue GetConsoleAliasExesLengthA LoadResource GlobalAddAtomA EndUpdateResourceW GetCurrentProcess CreateJobObjectW SignalObjectAndWait GetModuleHandleW GetTickCount GetPrivateProfileStringW GetWindowsDirectoryA TzSpecificLocalTimeToSystemTime GetVolumePathNameW GlobalAlloc LoadLibraryW SetConsoleCursorPosition LCMapStringA GetConsoleAliasesW OpenMutexW GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress EnumDateFormatsExA RemoveDirectoryA SetComputerNameA LoadLibraryA InterlockedExchangeAdd CreateFileMappingW AddVectoredExceptionHandler FindFirstVolumeMountPointW SetThreadIdealProcessor FoldStringW GlobalFindAtomW GetModuleHandleA HeapSetInformation GetStringTypeW CompareStringA GetCurrentThreadId SetFileShortNameA CreateFileA GetComputerNameA GetDateFormatW VirtualAlloc DebugActiveProcess Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement CloseHandle WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount RaiseException FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle FlushFileBuffers HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeA

user32

DdeQueryStringW CharUpperW GetMessageExtraInfo

gdi32

CreateCompatibleBitmap GetDeviceGammaRamp

advapi32

SetKernelObjectSecurity

Sharing